389a8460e4
### Benefits Can protect metrics endpoint with `Bearer` token authentication provided by gitea. see PR #637 for previous discussion. ### Possible drawbacks No possible drawbacks ### Applicable issues - fixes #635 ### Additional information ``` gitea: metrics: enabled: true token: "somepassword" serviceMonitor: enabled: true ``` Using above configuration is sufficient to secure /metrics endpoint with bearer token and corresponding ServiceMonitor. ### Checklist - [x] Parameters are documented in the `values.yaml` and added to the `README.md` using [readme-generator-for-helm](https://github.com/bitnami-labs/readme-generator-for-helm) - [ ] ~~Breaking changes are documented in the `README.md`~~ Not applicable - [x] Templating unittests are added Signed-off-by: Hitesh Nayak <hiteshnayak305@gmail.com> Reviewed-on: https://gitea.com/gitea/helm-chart/pulls/719 Reviewed-by: justusbunsi <justusbunsi@noreply.gitea.com> Co-authored-by: Hitesh Nayak <hiteshnayak305@gmail.com> Co-committed-by: Hitesh Nayak <hiteshnayak305@gmail.com>
43 lines
1.5 KiB
YAML
43 lines
1.5 KiB
YAML
{{- if and .Values.gitea.metrics.enabled .Values.gitea.metrics.serviceMonitor.enabled -}}
|
|
apiVersion: monitoring.coreos.com/v1
|
|
kind: ServiceMonitor
|
|
metadata:
|
|
name: {{ include "gitea.fullname" . }}
|
|
namespace: {{ .Values.namespace | default .Release.Namespace }}
|
|
labels:
|
|
{{- include "gitea.labels" . | nindent 4 }}
|
|
{{- if .Values.gitea.metrics.serviceMonitor.additionalLabels }}
|
|
{{- toYaml .Values.gitea.metrics.serviceMonitor.additionalLabels | nindent 4 }}
|
|
{{- end }}
|
|
spec:
|
|
selector:
|
|
matchLabels:
|
|
{{- include "gitea.selectorLabels" . | nindent 6 }}
|
|
endpoints:
|
|
- port: http
|
|
{{- if .Values.gitea.metrics.serviceMonitor.interval }}
|
|
interval: {{ .Values.gitea.metrics.serviceMonitor.interval }}
|
|
{{- end }}
|
|
{{- with .Values.gitea.metrics.serviceMonitor.relabelings }}
|
|
relabelings:
|
|
{{- . | toYaml | nindent 6 }}
|
|
{{- end }}
|
|
{{- if .Values.gitea.metrics.serviceMonitor.scheme }}
|
|
scheme: {{ .Values.gitea.metrics.serviceMonitor.scheme }}
|
|
{{- end }}
|
|
{{- if .Values.gitea.metrics.serviceMonitor.scrapeTimeout }}
|
|
scrapeTimeout: {{ .Values.gitea.metrics.serviceMonitor.scrapeTimeout }}
|
|
{{- end }}
|
|
{{- with .Values.gitea.metrics.serviceMonitor.tlsConfig }}
|
|
tlsConfig:
|
|
{{- . | toYaml | nindent 6 }}
|
|
{{- end }}
|
|
{{- if .Values.gitea.metrics.token }}
|
|
authorization:
|
|
type: Bearer
|
|
credentials:
|
|
name: {{ include "gitea.metrics-secret-name" . }}
|
|
key: token
|
|
optional: false
|
|
{{- end }}
|
|
{{- end -}} |